lukechilds/node - node - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
jkummerow@chromium.org	39e2426b20	v8: backport fix for CVE-2013-{6639\|6640} Quoting CVE-2013-6639: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index. Quoting CVE-2013-6640: The DehoistArrayIndex function in hydrogen-dehoist.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index. Like 6b92a7, this is unlikely to affect node.js because it only runs local, trusted code. However, if there exists some module somewhere that populates an array index with remotely provided data this could very well be used to crash a remote server running node. Defense in depth and all. This is a backport of upstream commit r17801. Original commit log: Limit size of dehoistable array indices LOG=Y BUG=chromium:319835,chromium:319860 R=dslomov@chromium.org Review URL: https://codereview.chromium.org/74113002	11 years ago
isaacs	81c278d58d	V8: Upgrade to 3.14.5.8	12 years ago
Ben Noordhuis	b15a10e7a0	deps: downgrade v8 to 3.14.5 V8 3.15 and newer have stability and performance issues. Roll back to a known-good version.	12 years ago
isaacs	0c2e5ec840	V8: Upgrade to 3.15.11.15	12 years ago
isaacs	8024252877	V8: Upgrade to 3.15.11.10	12 years ago
Fedor Indutny	d22bd9e3c4	deps: update v8 to 3.15.11.7	12 years ago
Fedor Indutny	0054264d88	v8: update to 3.15.11.5	12 years ago
Fedor Indutny	7b4d95a976	deps: update v8 to 3.15.11	12 years ago
isaacs	95c9305874	V8: Upgrade to 3.13.7.4	12 years ago
isaacs	29d12c7342	V8: Upgrade to 3.11.10.25	12 years ago
isaacs	3411a03dd1	V8: Upgrade to 3.13.7.1	12 years ago
Bert Belder	4899116d4b	v8: upgrade to 3.11.10.22	12 years ago
Bert Belder	2d9239359d	v8: upgrade to v3.11.10.19	12 years ago
isaacs	f4f0daa44d	V8: Upgrade to 3.11.10.17	12 years ago
Bert Belder	74872b0dc9	v8: upgrade to version 3.11.10.12	13 years ago
Bert Belder	6b26583e84	v8: upgrade to v3.11.10.10	13 years ago
mstarzinger@chromium.org	48893af7bb	Fix performance regression caused by r11202. R=erik.corry@gmail.com BUG=v8:2156,v8:2034 TEST=mjsunit/regress/regress-2156,mjsunit/regress/regress-2034 Review URL: https://chromiumcodereview.appspot.com/10539131 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@11800 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
Bert Belder	50464cd4f4	v8: upgrade to v3.11.10	13 years ago
isaacs	940a6863ea	Roll V8 back to 3.9.24.31	13 years ago
isaacs	46b09e4190	Roll V8 back to 3.10.8.13	13 years ago
isaacs	cbdf3393a2	Upgrade v8 to 3.11.7	13 years ago
isaacs	3f3f958c14	Upgrade V8 to 3.11.1	13 years ago
isaacs	6ed5ef5fe0	Upgrade V8 to 3.9.24.9	13 years ago
lrn@chromium.org	5d69bbfbdb	Fix bug in x64 RegExp detecting start of string. Also add missing MIPS case in regexp tracer. Fixes issues v8:1748 and v8:1746 BUG=v8:1748, v8:1746 TEST=mjsunit/regress/regress-1748.js Review URL: http://codereview.chromium.org/8116001 git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@9504 ce2b1a6d-e550-0410-aec6-3dcde31c8c00	13 years ago
isaacs	4b64542fe0	Upgrade V8 to 3.9.24.6	13 years ago
isaacs	e4fc2cbfd3	Upgrade v8 to 3.9.17	13 years ago
isaacs	2e24ded6d2	Upgrade v8 to 3.9.11	13 years ago
isaacs	f4641bd4de	Update v8 to 3.9.9	13 years ago
isaacs	68a0c56a7d	Upgrade V8 to 3.9.5	13 years ago
isaacs	8be699494e	Upgrade V8 to 3.9.2	13 years ago
isaacs	05471f5c2a	Update v8 to 3.8.9	13 years ago
isaacs	40879f33cd	Upgrade V8 to 3.8.8	13 years ago
Ryan Dahl	60040a4f36	Upgrade V8 to 3.8.6	13 years ago
Ryan Dahl	557fc396b4	Upgrade V8 to 3.8.4	13 years ago
Ryan Dahl	b7c05e1b75	Upgrade V8 to 3.8.3	13 years ago
Ryan Dahl	4eaf4ce26a	Upgrade V8 to 3.8.2	13 years ago
Ryan Dahl	21e7292ea0	Upgrade V8 to 3.8.1	13 years ago
Ryan Dahl	de3c16afae	Upgrade V8 to 3.6.6.14	13 years ago
Ryan Dahl	b3a7de15b7	Upgrade V8 to 3.8.0	13 years ago
Ryan Dahl	21d081fd7f	Upgrade V8 to 3.7.12	13 years ago
Ryan Dahl	0ba8f05a42	Upgrade V8 to 3.6.6.7	13 years ago
Ryan Dahl	0e9c1ca673	Downgrade V8 to 3.6.4	13 years ago
Ben Noordhuis	edea4122b1	Revert "Upgrade V8 to 3.7.1" This reverts commit `92f5a5d3ca`. V8 3.7.1 in debug mode on ia32 has a curious race-like bug where an fs.Stats object is not fully formed until some time after it's created. This is easy to demonstrate by running `make test-debug`. V8 3.7.0 does not exhibit this behaviour so back we go. Fixes #1981.	13 years ago
Ryan Dahl	92f5a5d3ca	Upgrade V8 to 3.7.1	13 years ago
Ryan Dahl	33b5f2f779	Upgrade V8 to 3.7.0	13 years ago
Ryan Dahl	3b1d656da5	Revert "Upgrade V8 to 3.6.6" Not stable enough. - Windows snapshot linking broken - Linux crash on ./node_g test/simple/test-stream-pipe-multi.js This reverts commit `56e6952e63`.	13 years ago
Ryan Dahl	56e6952e63	Upgrade V8 to 3.6.6	13 years ago
Ryan Dahl	1b15af9dd2	Upgrade V8 to 3.6.4	13 years ago
Ryan Dahl	0bca54444a	Upgrade V8 to 3.6.1	13 years ago
Ryan Dahl	b15ab5de51	Upgrade V8 to 3.5.7	13 years ago

1 2 3

125 Commits (47abdd9c43ae97ed11cb8cc4c770b43043718308)